QNX6 Filesystem
| Format | QNX6 Filesystem |
|---|---|
| Short name | QNX6 |
| Category | filesystem |
| Platforms | QNX |
| Crush support | Supported (RawImageVFS) |
| Status | Reviewed |
| Last reviewed | 2026-10-04 |
Forensic relevance
The QNX Neutrino power-safe filesystem, used in vehicle infotainment and telematics units and other embedded systems. Two superblocks alternate; the one with the higher serial number is current, and the other describes the previous state of the filesystem. Inodes and directory blocks are addressed through block pointer trees. Exists in little- and big-endian byte order.
Signatures
| Offset | Hex | ASCII (non-printable as .) | Description |
|---|---|---|---|
| offset 8192 (0x2000) | 22 11 19 68 | "..h | Superblock magic 0x68191122 after the 8 KiB boot block (little-endian) |
| offset 8192 (0x2000) | 68 19 11 22 | h.." | Superblock magic 0x68191122 after the 8 KiB boot block (big-endian) |
| offset 0 (0x0) | 22 11 19 68 | "..h | Superblock magic 0x68191122 at byte 0, layouts without boot block, e.g. Audi MMI 3G (little-endian) |
| offset 0 (0x0) | 68 19 11 22 | h.." | Superblock magic 0x68191122 at byte 0, layouts without boot block (big-endian) |
Known extensions
None recorded
References
- The QNX6 Filesystem (Linux kernel documentation) https://docs.kernel.org/filesystems/qnx6.html
- Mobile Forensics – The File Format Handbook: QNX6 (Conrad Meyer, Springer, 2022) https://doi.org/10.1007/978-3-030-98467-0_4
- qnxmount — QNX6, ETFS and EFS parsers (Netherlands Forensic Institute) https://github.com/NetherlandsForensicInstitute/qnxmount
- abrignoni/qnxprobe — MBR/GPT, LVM2 and filesystem reader for raw images (QNX6/QNX4, ETFS, EFS, ext2/3/4, F2FS, FAT32/16/12, exFAT, NTFS, HFS+, APFS, QNX IFS, SquashFS, JFFS2, UBI/UBIFS, YAFFS) https://github.com/abrignoni/qnxprobe
Cite this entry
Crush Format Reference, “QNX6 Filesystem”. https://kalink0.github.io/crush-forensics/formats/qnx6/ — source: crush/data/build_formats_db.py at commit 640a2a9928f4e36a976b89901512a8dce824d093, built 2026-10-21 06:46:19 UTC.
Entry in the source at this commit · Change history of the source · Report a correction